JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

77.239.121.13

Activity Trending Down

Abuse Confidence Score

42% Elevated

18 reports

17 reporters · latest 1 month ago

ISP: Senko Digital LLC - DE Network
Usage Type: Data Center/Web Hosting/Transit
ASN: AS213520
Hostname(s): decdn.fluffytarium.com
Domain Name: senko.digital
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

18 from 17 distinct reporters

First reported

October 6th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 4 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2

Most common categories Brute-Force 10 SSH 6 Web App Attack 5 Hacking 5 Port Scan 3

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-06 15:07:04 UTC · (1 month ago)	(mod_security) mod_security (id:218420) triggered by 77.239.121.13 (759905.senko.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:06:57.883876 2026] [security2:error] [pid 17418:tid 17418] [client 77. ... show more (mod_security) mod_security (id:218420) triggered by 77.239.121.13 (759905.senko.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:06:57.883876 2026] [security2:error] [pid 17418:tid 17418] [client 77.239.121.13:40650] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.45:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.45"] [uri "/hello.world"] [unique_id "asUOkQf25QpG8H6pROlnZAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-06 10:05:04 UTC · (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,mx02,wa01,wa02]	Brute-Force SSH
🇫🇷 Kejult	2026-10-06 08:27:09 UTC · (1 month ago)	Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.	Hacking SSH
Anonymous	2026-10-06 08:26:20 UTC · (1 month ago)	[Tue Oct 06 10:26:19.736302 2026] [:error] [pid 20333:tid 20333] [client 77.239.121.13:23152] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)\\b(?:a(?:llow_url_(?:fopen\|include)\|pc.(?:coredump_unmap\|en(?:able(?:_cli\|d)\|tries_hint)\|( ... show more [Tue Oct 06 10:26:19.736302 2026] [:error] [pid 20333:tid 20333] [client 77.239.121.13:23152] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)\\b(?:a(?:llow_url_(?:fopen\|include)\|pc.(?:coredump_unmap\|en(?:able(?:_cli\|d)\|tries_hint)\|(?:gc_)?ttl\|mmap_file_mask\|preload_path\|s(?:erializer\|hm_s(?:egments\|ize)\|lam_defense)\|use_request_time)\|rg (7590 characters omitted)' against variable `ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input' (Value: `\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "126"] [id "933120"] [rev ""] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: allow_url_include=1 found within ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "2"] [ver "OWASP_CRS/4.31.0-dev"] [maturity "0"] [accuracy "0"] ... show less	Web App Attack
Anonymous	2026-10-06 08:23:54 UTC · (1 month ago)	Invalid user user from 77.239.121.13 port 33128 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 Failed password for invalid user user from 77.239.121.13 port 33128 ssh2 pam_unix(sshd:auth): authe ... show more Invalid user user from 77.239.121.13 port 33128 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 Failed password for invalid user user from 77.239.121.13 port 33128 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 user=root Failed password for root from 77.239.121.13 port 43908 ssh2 show less	Brute-Force SSH
🇬🇧 Interceptor_HQ	2026-10-06 08:23:42 UTC · (1 month ago)	request_uri: /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -- automatic report --	Brute-Force Hacking
🇩🇪 enjoyably	2026-10-06 08:19:04 UTC · (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇺🇸 drewf.ink	2026-10-06 08:18:16 UTC · (1 month ago)	[08:18] Attempted telnet login with credentials admin:a***n	Brute-Force IoT Targeted
Anonymous	2026-10-06 08:14:50 UTC · (1 month ago)	2026-10-06T08:14:16.227915+00:00 ebi sshd[1396487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 2026-10-06T08:14:17.660725+00:00 ebi sshd[1396487]: Failed password for invalid user admin from ... show more 2026-10-06T08:14:16.227915+00:00 ebi sshd[1396487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 2026-10-06T08:14:17.660725+00:00 ebi sshd[1396487]: Failed password for invalid user admin from 77.239.121.13 port 30740 ssh2 2026-10-06T08:14:48.988933+00:00 ebi sshd[1396651]: Invalid user user from 77.239.121.13 port 26052 ... show less	Brute-Force SSH
🇩🇪 xserverx.ru	2026-10-06 08:12:00 UTC · (1 month ago)	[UFW SCAN!!!!] SRC=77.239.121.13 LEN=40 TOS=0x00 PREC=0x00 TTL=56 PROTO=TCP SPT=36341 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ...	Port Scan
🇫🇮 robotstxt	2026-10-06 08:08:51 UTC · (1 month ago)	Oct 6 08:07:14 s1 sshd[3474859]: Invalid user admin from 77.239.121.13 port 59136 Oct 6 08:07:47 s1 sshd[3474916]: Invalid user user from 77.239.121.13 port 58302 Oct 6 08:08:48 s1 sshd[3475047]: Invalid user user from 77.239.121.13 port 15912 ...	Brute-Force
🇨🇦 Mediashaker	2026-10-06 08:07:17 UTC · (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 77.239.121.13 (DE/Germany/759905.senko.network)	SQL Injection
🇳🇱 Selckie	2026-10-06 08:02:13 UTC · (1 month ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇺🇸 paradoxnetworks	2026-10-06 08:01:35 UTC · (1 month ago)	2026-10-06T08:01:01.283795+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1919856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 2026-10-06T08:01:03.276261+00:00 edge-hal-ewr01.int.pdx.net.uk ... show more 2026-10-06T08:01:01.283795+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1919856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.121.13 2026-10-06T08:01:03.276261+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1919856]: Failed password for invalid user admin from 77.239.121.13 port 27562 ssh2 2026-10-06T08:01:35.048547+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1919934]: Invalid user user from 77.239.121.13 port 29478 ... show less	Brute-Force SSH
Anonymous	2026-10-06 08:00:20 UTC · (1 month ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 2a02:c202:2359:6007::1

🇨🇱 190.5.48.52

🇺🇸 87.82.253.88

🇺🇸 63.40.119.254

🇺🇦 46.150.80.168

🇰🇷 112.151.168.124

🇺🇸 84.233.199.140

🇺🇸 40.124.185.115

🇸🇬 212.73.148.40

🇳🇱 195.178.110.30

🇺🇸 194.77.198.185

🇧🇷 179.98.205.99

🇺🇸 109.105.210.8

🇳🇱 93.158.213.26

🇻🇪 38.25.244.211

🇨🇭 209.99.190.200

🇳🇱 185.136.15.13

🇨🇭 179.43.133.154

🇳🇱 109.160.32.171

🇳🇵 103.189.161.95